H3C Technologies H3C Intelligent Management Center - Manual (Page 62)

46
Modifying a client ACL
1. Click the User tab.
2. From the navigation tree, select User Security Policy > Endpoint Access Control > Client ACL.
The client ACL list displays all client ACLs.
3. Click the Modify icon for the client ACL you want to modify.
The Modify Client ACL page appears.
4. Modify the basic information for the client ACL. The ACL Name and Service Group fields cannot be
modified.
5. Modify the ACL rules by using one or more of the following methods:
{
Click Add in the ACL Rule Information area to add an ACL rule.
{
Click the Modify icon for an existing ACL rule on the ACL Rule List to modify its settings.
{
Click the Delete icon for an undesired ACL rule to delete the rule.
6. Adjust priorities for the ACL rules.
ACL rules are sorted in descending priority order. Click the Move Up icon
or Move Down icon
to change rule positions on the ACL Rule List.
7. Click OK.
Deleting a client ACL
A client ACL cannot be deleted when it is assigned to a security policy. To delete the client ACL, first
remove it from the security policy. For more information about modifying a security policy, see
"
Modifying a security policy ."
To delete a client ACL:
1. Click the User tab.
2. From the navigation tree, select User Security Policy > Endpoint Access Control > Client ACL.
The client ACL list displays all client ACLs.
3. Click the Delete icon for the client ACL you want to delete.
A confirmation dialog box appears.
4. Click OK.
Managing URL control policies
URL access control can be implemented through a URL control policy and an optional Hosts file check.
When a user accesses the network, EAD sends the URL control policy and the Hosts file contents to the
iNode client to check HTTP access.
• URL control policy—The iNode client parses the HTTP packets of access users according to the URL
control policy, and prevents users from accessing specified websites by IP address and domain
name.
You can configure the following contents in a URL control policy:
{
An IP URL default action